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AIR  TRAFFIC  CONFLICT  RESOLUTION  AND  RECOVERY 


ALFONS  GESERt,  CESAR  MUNOZi,  GILLES  DOWEK§ ,  AND  FLORENT  KIRCHNERU 

Abstract.  An  essential  element  in  the  Free  Flight  concept  is  the  detection  and  avoidance  of  air  traffic 
conflicts.  A  conflict  occurs  when  the  required  separation  between  two  aircraft,  namely  the  ownship  and  the 
intruder,  is  lost.  Conflict  detection  and  resolution  systems  predict  loss  of  separation  and  output  conflict 
avoidance  maneuvers  that  divert  the  ownship  from  its  original  trajectory.  In  this  paper,  we  address  the 
problem  of  redirecting  the  ownship  to  its  original  path,  in  a  geometric  optimal  way,  without  introducing 
new  conflicts.  We  call  this  concept  Resolution  and  Recovery.  Given  the  current  3-dimensional  position  and 
velocity  vectors  of  two  aircraft  in  predicted  conflict  and  the  ownship’s  required  time  of  arrival  at  the  target 
point,  the  resolution  and  recovery  algorithm  outputs  a  choice  of  maneuvers.  Each  maneuver  comprises  an 
escape  course  and  a  recovery  course  to  be  followed  by  the  ownship.  The  escape  course  brings  the  ownship  off 
the  predicted  conflict  and  the  recovery  course  returns  it  to  the  original  target  point.  We  provide  a  rigorous 
mathematical  description  of  the  problem  and  show  that  the  algorithm  is  correct,  i.e.,  no  matter  which  of 
the  proposed  maneuvers  the  ownship  picks,  it  will  arrive  at  the  target  point  at  the  scheduled  time  while 
maintaining  the  minimum  required  separation  to  the  intruder  at  all  times. 

Key  words,  conflict  detection  and  resolution,  3-dimensional  airspace,  traffic  avoidance,  free  flight 

Subject  classification.  Computer  Science 

1.  Introduction.  Conflict  Detection  and  Resolution  (CD&R)  systems  are  designed  to  warn  air  traffic 
controllers  and/or  pilots  about  an  imminent  loss  of  separation  between  aircraft,  and  to  assist  them  in  a 
corrective  maneuver.  Algorithms  for  CD&R  have  been  largely  studied  over  the  last  decade  (for  a  survey  on 
CD&R  methods  see  [11])  and  new  algorithms  are  proposed  every  day. 

With  the  emerging  of  more  reliable  surveillance  and  communication  technologies,  air  borne  CD&R  capa¬ 
bility  is  becoming  a  fundamental  feature  of  new  concepts  for  air  traffic  management  such  as  Free  Flight  [14] 
and  DAG-TM  (Distributed  Air/Ground  Traffic  concept)  [1].  These  concepts  address  the  expected  increase 
in  air  traffic  density  in  the  next  decades,  by  distributing  among  the  different  actors  of  the  airspace  system 
the  responsibility  for  keeping  minimum  traffic  separation.  In  contrast  to  ground-based  systems,  on  board 
systems  have  a  limited  access  to  computational  resources  and,  by  their  nature,  are  distributed.  To  target 
the  complexity  of  a  free-fiight  environment,  new  approaches  for  CD&R  have  been  proposed  based  on  non¬ 
standard  programming  techniques  such  as  genetic  algorithms  [6,  12,  9],  neural  networks  [5],  game  theory 
[15],  graph  theory  [3],  or  semidefinite  programming  [8].  These  approaches  deal  with  issues  such  as  multi¬ 
ple  aircraft  conflicts  and  uncertainties  in  the  prediction  of  aircraft  trajectories.  Given  the  computational 
complexity  of  some  of  these  approaches,  they  may  require  time  and  space  discretizations. 

A  more  classical  approach  to  CD&R  is  the  so-called  geometric  approach  [7,  10,  2,  4].  In  this  approach, 
aircraft  trajectory  predictions  are  based  on  linear  projections  of  current  aircraft  states.  This  approach 
exploits  the  facts  that  linear  projections  can  be  computed  efficiently  and  that  prediction  errors  are  negligible 
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during  short  look-ahead  times.  For  this  reason,  this  approach  is  also  referred  as  tactical.  For  large  look¬ 
ahead  times  a  more  strategic  approach  that  looks  at  the  (pilot)  intent  information,  i.e.,  the  flight  plan,  is 
in  order.  While  tactical  approaches  have  well-understood  geometric  descriptions  that  allow  for  efficient  and 
clear  algorithms,  they  fall  short  on  pilots’  expectations  in  some  field  studies  [16].  Strategic  approaches  seem 
to  be  more  appreciated  by  pilots,  but  their  theory  is  far  less  understood. 

In  a  previous  work  [4],  we  have  proposed  a  geometric  optimization  algorithm  for  CD&R  in  a  3-D  airspace. 
In  this  paper,  we  address  the  recovery  problem,  that  is,  redirecting  the  ownship  to  the  original  path  while 
maintaining  the  minimum  required  separation  at  all  times.  The  new  proposed  algorithm  is  on  the  border 
between  tactical  and  strategic  algorithms.  Its  inputs  are  the  three-dimensional  position  and  velocity  vectors 
of  two  aircraft,  which  we  call  the  ownship  and  the  intruder  aircraft,  and  the  time  where  the  ownship  is 
required  to  arrive  at  its  target  point  (“Required  Time  of  Arrival”,  RTA).  The  RTA  defines  the  position  of 
the  target  point  by  the  ownship’s  constant  movement.  RTA  is  a  limited  form  of  intent  information:  the  target 
point  may  be  the  next  trajectory  change  point  in  the  ownship  flight  plan.  Assuming  a  loss  of  separation 
between  two  aircraft,  the  algorithm  outputs  a  choice  of  maneuvers  for  the  ownship.  Each  maneuver  consists 
of  an  escape  course  that  brings  the  ownship  off  the  predicted  conflict,  and  a  subsequent  recovery  course  that 
leads  the  ownship  back  to  its  original  path.  If  the  ownship  follows  any  proposed  maneuver  then  it  arrives 
at  RTA  at  the  scheduled  position  without  having  experienced  a  loss  of  separation  at  any  time.  In  the  mean 
time,  the  intruder  aircraft  is  assumed  to  continue  its  current  trajectory,  that  is,  ownship  resolution  and 
recovery  maneuvers  take  place  assuming  no  cooperation  of  the  intruder  aircraft. 

The  various  maneuvers  that  our  algorithm  proposes  differ  in  the  constraints  they  satisfy.  For  example, 
one  constraint  requires  that  during  the  maneuver,  the  ownship  may  only  change  its  ground  speed,  but  not 
its  heading  or  its  vertical  speed.  Another  constraint  requires  that  only  the  vertical  speed  of  the  ownship 
may  change.  Imposing  such  constraints  restricts  the  number  of  choices  to  finitely  many,  simplifies  the 
calculations  performed  by  the  algorithm,  is  simple  to  conceive  and  to  perform  by  the  crew,  and  enhances 
passenger  comfort.  The  maneuvers  that  our  algorithm  outputs  may  be  rendered  at  a  display  for  the  air  traffic 
controller  or  the  pilot  who  may  select  among  the  proposed  solutions.  Our  algorithm  is  also  suitable  for  use 
underneath  a  trajectory  planner  which  may  perform  the  selection.  However,  we  do  not  address  the  question 
of  physical  implementability  of  the  maneuvers  proposed  by  the  algorithm.  In  particular,  the  algorithm 
does  not  check  for  minimum/maximum  altitude/airspeed.  Nor  does  it  implement  cost-based  analysis  such 
as  fuel  consumption.  It  depends  on  the  capabilities  of  the  ownship  whether  a  proposed  maneuver  can  be 
implemented  or  not.  Since  aircraft  performance  data  are  not  available  to  the  algorithm,  we  assume  that 
these  kinds  of  analysis  are  implemented  in  an  external  module. 

The  algorithm  is  computationally  efficient,  suitable  for  embedding  in  a  flight-deck  computer,  and  appro¬ 
priate  for  formal  verification.  In  particular,  we  have  a  rigorous  analysis,  by  pencil  and  paper,  of  the  algorithm. 
Mechanically  checked  proofs  are  currently  under  development.  We  strongly  believe  that  given  the  critical¬ 
ity  of  CD&R,  rigorous  techniques  and  well-understood  mathematical  models  are  required  to  guarantee  the 
overall  safety  of  the  new,  and  more  autonomous,  air  traffic  systems. 

Notation.  Variables  denoting  positions  are  named  “s” ,  velocities  are  named  “n” ,  and  times  are  named 
“f  ’ ;  ownship  variables  are  subscripted  by  “o” ;  intruder  variables  are  subscripted  by  “i” ;  relative  and  generic 
variables  have  neither  subscript.  Coordinate  names  (x,y,  or  z)  are  appended  as  a  subscript  to  the  name. 
Variables  assigned  to  the  escape  course  receive  a  prime;  variables  assigned  to  the  recovery  course  receive 
a  double  prime.  For  instance  denotes  the  x  coordinate  of  the  ownship  escape  speed,  Vy  denotes  the  y 
coordinate  of  the  original  relative  speed,  and  t'  denotes  the  time  the  escape  course  ends. 
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2.  Definition  of  the  Problem.  For  conflict  detection  purposes,  aircraft  are  assumed  to  be  surrounded 
by  an  avoidance  region,  which  is  typically  a  cylinder  of  diameter  5  nautical  miles  and  height  1000  feet.  Two 
aircraft  are  said  to  be  in  conflict  when  their  avoidance  regions  overlap.  In  this  paper,  we  take  an  alternative, 
but  equivalent  view,  where  aircraft  are  surrounded  by  protected  zones  twice  as  big  as  the  individual  avoidance 
regions.  In  this  view,  a  conflict  is  the  incursion  of  one  aircraft  in  the  protected  zone  of  another  one. 

We  assume  the  airspace  given  as  a  three-dimensional  Cartesian  coordinate  system,  where  the  z-axis  points 
upward  in  the  vertical  direction.  We  consider  two  aircraft,  namely  ownship  and  intruder.  The  ownship’s 
initial  position  (i.e.,  its  position  at  time  t  =  0)  is  given  by  the  vector  Sg  =  (sox,  Sgy,  Sgz)-  The  ownship’s 
original  velocity  vector  is  given  by  vZ  =  (vox,'Voy,'Voz)-  Likewise  the  intruder’s  initial  position,  s^,  and  the 
intruder’s  velocity  vector,  vl,  are  given.  It  is  convenient  to  consider  the  ownship’s  motion  relative  to  the 
intruder.  For  this  purpose,  we  introduce  a  relative  coordinate  system  where  the  intruder’s  position  is  at  the 
origin,  and  we  consider  the  relative  position  vector  s  =  (sx,Sy,Sz)  =  sZ  —  and  the  relative  velocity  vector 
V  =  (vx,Vy,Vz)  =  iZo  —  Vi-  In  this  coordinate  system,  the  protected  zone  is  a  cylinder  P  around  the  intruder 
defined  as  follows: 

P  =  {(x,y,z)  \  and  \z\  <  H}. 

In  the  usual  view,  D  and  PI  denote  the  diameter  and  height  of  the  avoidance  region,  respectively. 

The  aircraft  are  said  to  be  in  conflict  at  time  t  when  s  +  tv  €  P.  They  are  in  predicted  conflict  if  they 
are  in  conflict  at  some  time  0  <t. 

Given  a  velocity  vector  v  =  {vx,Vy,Vz),  we  define  the  following  concepts. 

•  Ground  speed:  Length  of  the  horizontal  projection  of  u,  i.e.,  +  Vy. 

•  Vertical  speed:  Vertical  component  of  v,  i.e.,  Vz- 

•  Pleading:  Direction  of  the  horizontal  projection  of  v,  i.e.,  angle  a  such  that  =  u  cos(q:)  and 
Vy  =  usin(Q:),  where  v  is  the  ground  speed  of  v.  We  avoid  explicit  references  to  a  in  our  analytical 
description  of  the  escape-recovery  maneuvers. 

The  task  of  the  resolution  and  recovery  algorithm  (RR3D)  is  defined  as  follows: 

Inputs: 

•  Initial  relative  ownship’s  position  s. 

•  Absolute  velocity  vectors  of  ownship  and  intruder  aircraft,  respectively.  The  relative  velocity 
vector  is  given  hy  v  =  iZ,  —  Pi- 

•  Required  Time  of  Arrival  (RTA)  or  target  time  t"  >  0,  which  determines  the  target  point 

s'^'=s  +  t''v.  (2.1) 


Assumptions: 

•  Courses,  i.e.,  trajectories  between  way-points,  are  line  segments.  Hence,  courses  are  described  by 
a  position,  a  velocity  vector,  and  a  time  interval.  Moreover,  we  assume  that  changes  of  course  or 
speed  are  implemented  in  zero  time  by  an  aircraft. 

•  Absolute  ground  speeds  are  not  zero,  i.e.,  ^  0  and  +  v‘fy  ^  0. 

•  Neither  at  initial  time  nor  at  target  time  are  the  aircraft  in  conflict,  i.e.,  s,s"  ^  P. 

•  Neither  at  initial  time  nor  at  target  time  is  the  ownship  at  the  boundary  of  the  intruder’s  protected 
zone,  i.e.,  s,  s"  e  {(a;,  y,  2:)  I  -I- or  \z\>  H}. 

•  The  aircraft  are  in  predicted  conflict  before  t” ,  i.e.,  s  +  tv  €  P  for  some  time  0  <  t  <  t” . 

Outputs:  A  list  of  maneuvers  each  one  a  triple,  (t',Vg,Vg),  composed  of 
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Protected  zone 


Fig.  2.1.  Predicted  conflict  scenario 


t=0 


•  A  time  of  switch  t'  such  that  0  <  t'  <  t” . 

•  An  escape  velocity  vector  Vg  that  determines  a  conflict-free  escape  course  for  the  ownship,  i.e.,  let 
v'  =  v'g  —  Vi,  then 

s  +tv'  ^  P  for  all  times  0  <t  <t' .  (2.2) 

•  A  recovery  velocity  vector  v”  that  determines  a  conflict-free  and  on-time  recovery  course  for  the 
ownship,  i.e.,  let  v"  =  u"  —  fl),  then 

s -I-  t'v'  +  (t  —  t')v"  ^  P  for  all  times  t'  <t  <  t" ,  and  (2.3) 

s -I-  t'v'  +  it"  -  t')P'  =  P'.  (2.4) 

In  other  words,  if  the  ownship  flies  the  escape  course  from  time  0  to  t',  and  the  recovery  course  from 
time  t'  to  t" ,  then  (1)  it  shall  not  be  in  conflict  at  any  time  (by  (2.2)  and  (2.3))  and  (2)  it  arrives  at  s"  at 
time  t"  (by  (2.4)).  We  assume  no  cooperation  from  the  intruder  aircraft,  i.e.,  the  intruder  does  not  need  to 
maneuver.  The  original  situation  is  depicted  in  Figure  2.1,  and  the  escape  and  recovery  courses  are  depicted 
in  Figure  2.2.  Henceforth,  we  call  the  ownship’s  change  of  the  velocity  vector  from  Vg  to  v'g  the  escape  step, 
and  its  change  from  v'g  to  v'f  the  recovery  step. 

The  ownship’s  maneuvers  shall  be  constrained  in  such  a  way  that  both  v'g  and  v'f  satisfy  one  of  the 
following  conditions: 

1.  Change  of  vertical  speed  only.  The  ownship’s  vertical  speed  may  change  but  neither  its  heading  nor 
its  ground  speed,  i.e.,  v'g^  =  Vg^  =  v'f^  and  v'gy  =  Vgy  =  v'fy. 

2.  Change  of  ground  speed  only.  The  ownship’s  ground  speed  may  change  but  neither  its  heading  nor 

its  vertical  speed.  Formally,  there  is  a  A:  >  0  such  that  v'g^  =  kvgx,  v'gy  =  kvgy,  and  v'g^  =  Vgz,  and 

there  is  a  j  >  0  such  that  v'f^  =  jvox,  v'fy  =  jvgy,  and  v'f^  =  Vgz. 
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Fig.  3.1.  Escape/Recovery  courses:  Line  case 

3.  Change  of  heading.  In  the  two  dimensional  projection,  the  escape  course  and  the  recovery  course 
(each  in  absolute  coordinates)  form  a  triangle.  By  the  triangle  inequality,  the  escape  course  and  the 
recovery  course  together  are  longer  than  the  original  course.  To  arrive  at  the  target  point  at  time 
t" ,  the  ownship  has  to  compensate  the  longer  way  by  a  greater  average  ground  speed  as  opposed  to 
its  original  ground  speed.  Hence,  maneuvers  where  only  heading  changes  are  allowed  cannot  reach 
the  target  point  in  time.  In  this  case,  we  propose  a  change  of  heading  combined  with  a  change  of 
ground  speed  at  time  t' .  For  the  escape  step,  the  ownship’s  heading  may  change,  but  neither  its 
ground  speed  nor  its  vertical  speed;  for  the  recovery  step  in  addition  to  a  heading  change,  one  must 
allow  for  a  change  of  ground  speed  as  well.  Formally,  ^oz  =  '^oz- 

Furthermore,  we  require  that  the  escape-recovery  maneuvers  are  tangential  to  the  lateral  surface  of  the 
protected  zone.  We  conjecture  that  tangential  maneuvers  are  optimal,  among  all  maneuvers  that  satisfy  the 
same  set  of  constraints,  in  the  following  sense.  The  amount  of  change  in  one  step  is  expressed  by  the  velocity 
change  vectors  Av'  =  v'^  —  Vg  and  Av"  =  v'f  —  Vg' .  The  effort  of  a  maneuver  is  the  sum  of  squares  of  its 
velocity  change  vectors,  i.e.,  |Au'p  +  |Au"|^.  A  maneuver  is  called  optimal  if  its  effort  is  less  than,  or  equal 
to,  the  effort  of  any  other  maneuver. 

3.  Correctness  Criteria.  In  this  section  we  use  s,v,t  in  an  generic  way,  i.e.,  they  do  not  necessarily 
refer  to  the  relative  variables.  We  define  the  infinite  cylinder  as  the  set  of  points 

-Poo  =  {{x,y,z)  I  +J/2  <  T>2}, 
and  we  define  the  infinite  slice  as  the  set  of  points 

Soo  =  {(x,y,z)  I  |2:|  <  H}. 

The  algorithm  only  considers  two  kinds  of  escape  and  recovery  courses: 

•  Line  case:  Courses  that  are  tangential  to  the  lateral  surface  of  the  protected  zone  (Figure  3.1).  That 
is,  for  some  point  s,  s  is  tangent  to  Pqo- 

•  Circle  case:  Courses  that  are  incident  to  one  of  the  disks  of  the  protected  zone  without  intersecting 

its  interior  (Figure  3.2).  That  is,  for  some  point  s,  |sz|  =  H,  and  the  moving  point 

either  enters  the  infinite  cylinder  upon  leaving  the  infinite  slice  or  leaves  the  infinite  cylinder  upon 
entering  the  infinite  slice. 

Note  that  the  case  where  the  lateral  surface  is  touched  and  the  touching  point  is  incident  with  a  circle  is 
counted  as  a  line  case,  and  that  the  case  Vz  =  0,  |sz|  =  H  is  counted  as  a  circle  case. 

Below  we  provide  a  rigorous  proof  that  line  and  circle  cases  are  correct,  i.e.,  they  describe  conflict-free 
courses.  Since  escape  and  recovery  courses  touch  P,  we  state  without  proof  that  they  are  also  optimal  from 
a  geometric  point  of  view.  In  order  to  provide  the  correctness  proof,  we  first  take  a  time  reference  relative 
to  the  time  of  the  tangent  point  in  the  line  case  and  relative  to  the  time  of  the  incident  point  in  the  circle 
case,  and  define  vertical  and  horizontal  separation  criteria. 
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Fig.  3.2.  Escape/Recovery  courses:  Circle  cases 
For  the  first  criterion  we  consider  only  the  vertical  coordinate. 

Lemma  3.1  (Vertical  separation).  Let  a  moving  point  s  +  tv  be  at  time  0  at  the  surfaee  of  Sea, 

Is^l  =  H.  (1)  If  SzVz  >  0  holds  then  \sz  +tVz\  >  H  for  all  t>0.  (2)  If  SzVz  <  0  holds  then  |sz  +tVz\  >  H 
for  all  t  <  0. 

Proof. 

1.  We  prove  that  {sz  +  tVz)^  >  H"^,  and  so  \sz  +tVz\  >  H,  for  all  t  >  0.  Since  s^  =  H"^,  (sz  +  tVz^  = 

+  2tSzVz  +  t^v‘1.  By  hypothesis,  SzVz  >  0.  Thus,  {sz  +  tVz)^  >  H'^  for  f  >  0. 

2.  By  substitution  of  —Vz  for  Vz  and  —t  for  t  in  (1). 

□ 

Remark  3.2.  Ifvz  =0  then  we  have  vertical  separation  for  all  times  t. 

For  the  second  criterion  we  consider  only  the  horizontal  plane.  We  are  going  to  need  a  technical  definition. 
Definition  3.3  (Entry  point,  exit  point).  We  call  s,  s\  +Sy  =  an  entry  point  to  the  infinite  cylinder 
(for  v),  if  the  derivative,  with  respect  to  t,  of  the  squared  horizontal  distance  (s^  +  tUx)"^  +  (sy  +  tVyY  at 
time  0  is  non-positive;  and  an  exit  point  from  the  infinite  cylinder  if  it  is  non-negative  (see  Figure  3.3).  If 
the  derivative  is  equal  to  zero  then  we  have  a  tangent  point,  which  is  both  an  entry  point  and  an  exit  point. 
Formally,  s  is  an  entry  point  if 

^x'^x  T  —  0;  (^‘f) 

an  exit  point  if 

^x'^x  T  ^y'^y  ^  (^■^) 

and  a  tangent  point  if 

^x'^x  T  ^y'^y  —  O'  (^•^) 


Lemma  3.4  (Horizontal  separation).  Let  a  moving  point  s-\-tv  be  at  time  0  at  the  lateral  surface  of  P, 
i.e.,  Sx+Sy  =  .  (1)  If  s  is  an  exit  point  then  {sx  +  tVxY  +  (sy  +  tVyY  >  for  f  >  0.  (2)  If  s  is  an  entry 

point  then  (sx  +  tVxY  +  {sy  +  tVyY  >  for  f  <  0. 

Proof. 

1.  The  point  s  is  an  exit  point,  i.e.,  SxVx+SyVy  >  0.  Since  s^-i-Sy  =  D^,  (sx  -htvx)^  +  (sy  -htVy)^  =  + 

2t(sxVx+SyVy)-t-t^(v^-t-v^).  By  hypothesis,  (sxVx+SyVy)  >0.  Thus,  (sx +tVxf  +  (sy -t-tVyf  > 
for  f  >  0. 

2.  By  substitution  of  —v  for  v  and  —t  for  t  in  (1). 

□ 

Remark  3.5.  If  s  is  a  tangent  point  we  have  horizontal  separation  for  all  times  t. 
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Fig.  3.3.  Entry  and  exit  points  to/from  an  infinite  eylinder 

Finally,  we  provide  correctness  proofs  for  the  line  and  circle  cases. 

Theorem  3.6  (Line  Case  Correctness).  Let  s+tv  he  a  moving  point  sueh  that  s  is  tangent  to  Pqo- 
Then,  {sx  +  tVxY  +  (sy  +  tVyY  >  for  all  times  t. 

Proof.  At  time  0  we  have  a  tangent  point  to  the  lateral  surface  of  the  infinite  cylinder.  Using  the 
horizontal  separation  criterion  twice,  we  conclude  that  horizontal  separation  holds  for  all  times.  □ 

Theorem  3.7  (Circle  Case  Correctness).  Let  s  +  tv  he  a  moving  point  sueh  that  =  D^,  =H, 

and  either  (1)  SxVx  +  SyVy  <  0  and  SzVz  >0  or  (2)  SxVx  +  SyVy  >  0  and  SzVz  <  0.  Then,  for  all  times  t, 
either  (a)  horizontal  separation:  (sx  +  tUx)"^  +  (sy  +  tVyY  >  or  (h)  vertieal  separation:  \sz  +  tVz\  >  H . 

Proof.  In  case  (1)  we  get  vertical  separation  for  all  t  >  0  and  horizontal  separation  for  all  t  <  0.  In 
case  (2)  we  get  vertical  separation  for  alH  <  0  and  horizontal  separation  for  alH  >  0.  □ 

4.  Resolution  and  Recovery  Algorithm.  In  this  section  we  develop  the  algorithm  for  conflict  resolu¬ 
tion  and  recovery,  namely  RR3D.  We  present  the  algorithm  as  a  set  of  formulas  that  describe  escape-recovery 
maneuvers,  i.e.,  triples  {t',Vg,v'f),  where  t'  is  a  time  of  switch,  Vg  is  a  velocity  vector  that  determines  an 
escape  course,  and  v'f  is  a  velocity  vector  that  determines  a  recovery  course.  The  formulas  are  organized 
according  to  the  constraints  that  the  escape-recovery  maneuvers  satisfy.  As  explained  in  Section  2,  we  con¬ 
sider  three  constraints:  change  of  vertical  speed  only,  change  of  ground  speed  only,  and  change  of  heading 
combined  with  a  change  of  ground  speed  at  time  t' .  For  each  of  these  constraints  we  distinguish  several 
cases  according  to  the  part  of  the  surface  of  P  that  is  touched  during  the  escape  and  recovery  courses.  We 
identify  the  following  cases:  line/line  (Figure  4.1),  line/circle  (Figure  4.2),  circle/line  (Figure  4.3),  one-circle 
(Figure  4.4),  circle/circle  (Figure  4.5),  escape-circle  (Figure  4.6),  and  recovery-circle  (Figure  4.7).  As  we  will 
see  below,  not  all  the  cases  are  possible  in  all  situations. 

In  all  the  cases,  we  use  the  following  approach: 

1.  We  find  candidates  to  maneuvers  by  solving  the  equations  given  by  the  constraints  and  the  case 
analysis. 

2.  We  disregard  candidates  that  contradict  the  specification.  This  may  require  sanity  eheeks  with  the 
implicit  meaning  that  only  solutions  satisfying  them  are  considered  any  further. 

3.  Candidates  that  survive  the  last  check  are  the  maneuvers  returned  by  the  algorithm. 

Correctness  is  guaranteed  by  construction.  Furthermore,  we  aim  for  a  set  of  candidates  that  is  a  superset 

of  the  set  of  solutions. 

In  the  algorithm,  when  we  solve  a  quadratic  equation  with  non-null  coefficients,  we  assume  that  the 
discriminant  is  non-negative.  If  the  discriminant  happens  to  be  negative,  we  tacitly  infer  that  there  are  no 
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Fig.  4.5.  Circle- circle  cases  (side  views) 


Fig.  4.6.  Escape-circle  cases  (side  views) 


Fig.  4.7.  Recovery-circle  cases  (side  views) 


solutions  to  the  equation. 

4.1.  Common  Definitions.  We  first  introduce  a  set  of  technical  definitions  that  can  be  used  as 
procedures  in  an  actual  implementation  of  RR3D. 

The  times  at  which  a  moving  point  s  tv  intersects  the  lateral  surface  of  the  infinite  cylinder  are 
determined  by 

{Sx  +tV^y  {Sy  -{-tVy^  =  (4.1) 

If  the  ground  speed  is  different  from  zero,  i.e.,  Vy  >  0,  then  (4.1)  reduces  to  a  quadratic  equation 

in  t: 

+  vl)  +  2t{s^v^  +  SyVy)  si  si  -  =  0.  (4.2) 

The  discriminant  A  is  defined  as 

A  =  (s.u,  +  SyVyf  -  {vl  +  vl){sl  +sl-  D^)  (4.3) 

=  +  vl)  -  {s^Vy  -  SyV^)"^. 

If  A  <  0  then  the  moving  point  does  not  intersect  Poo-  In  particular,  if  A  =  0  we  have  the  tangent  case. 
Definition  4.1  (Tangent  condition).  A  moving  point  s  +  tv  is  tangent  to  Poo  if  and  only  if 

+  ^1)  =  {sxVy  -  (4.4) 

For  a  moving  point  that  is  tangent  to  Poo,  the  time  t  of  elosest  approaeh  in  the  horizontal  plane  is  the  one 
solution  of  (4.2); 
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^x'^x 

H- 

^x  '  ^y 


(4.5) 


Definition  4.2  (Entering  and  leaving  Poo)-  ^  w;e  get  two  solutions  for  (4.2) 


_  ^x'^x  ^y^y 

v‘^  v‘^ 

^x  '  ^y 

0//  ^x'f^x  '^y^y 

'■^x  ^  ^y 


(4.6) 

(4.7) 


By  definition,  0'  <  0".  It  is  easy  to  eheek  that  0'  is  an  entry  point  and  that  0"  is  an  exit  point. 

We  may  need  (4.4)  and  (4.5)  instantiated  with  the  parameters  of  the  escape  and  the  recovery  courses. 
For  the  escape  course  we  get  the  tangent  condition 


D^v':+v'^)  =  {s,v'-syv',r, 


(4.8) 


and  the  time  of  closest  approach  in  the  horizontal  plane 


SxV.,.  +  SyV: 


T  =  -- 


v^y 


v'.f  +  vi, 


(4.9) 


The  moving  point  s"  +  {t  —  t")v"  describes  the  recovery  course  in  a  translated  time  t  —  t" .  Therefore,  for 
the  recovery  course  we  get  the  tangent  condition 


D^{v'fi^+v''-^)  =  {sy'-s''v:f 


(4.10) 


and  the  time  of  closest  approach  in  the  horizontal  plane 


„  s'X  +  s'X  ,  .. 


(4.11) 


Definition  4.3  (Reaching  altitude  H  or  —H).  If  Vz  0  then  the  times  when  the  ownship  reaehes 
altitude  H  or  —H  are  the  solutions  of  \sz  +  tVz\  =  H  for  t: 


^  -sign{vz)H  -  Sz 
Vz 

^  sign(u^)g  - 


(4.12) 

(4.13) 


By  definition,  9'  <  9" . 

Definition  4.4  (Time  of  switch).  The  time  t'  of  switeh  from  the  eseape  eourse  to  the  reeovery  eourse 
is  given  by  (2.4)  and  s"  =  s+t"v.  This  time  satisfies 

t'{v'  —  v")  =  t"{v  —  v”), 


or  in  eoordinate  notation 


1 

II 

1 

(4.14) 

(4.15) 

1 

II 

1 

(4.16) 
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The  equations  (4.14)  and  (4.15)  allow  us  to  express  n"  and  v”  in  terms  of 


= 


= 


t"Vx  -  t'v'^ 
t"  -  t' 

t"Vy  —  t'v'y 

t"  - 1' 


(4.17) 

(4.18) 


4.2.  Change  of  vertical  speed  only.  We  impose  the  constraint  that  only  the  vertical  component  of 
the  velocity  vector  may  change.  Formally, 


=  Vox  =  V„ 


and 


“  '^oy  —  Vgy 


(4.19) 


If  the  relative  ground  speed  is  zero  {v^  +  Vy  =  0)  then  either  the  ownship  is  inside  the  infinite  cylinder 
(s^  +  Sy  <  H^),  and  there  is  no  vertical  solution,  or  else  there  is  no  predicted  conflict.  Otherwise,  0'  and 
0"  are  defined  as  in  equations  (4.6)  and  (4.7),  and  we  may  have  the  following  independent  solutions. 

•  Escape-circle.  If  0  <  0'  <  t”  and  \s”\  >  H  then  there  is  an  escape-circle  solution  (Figure  4.6).  It 
is  given  by  t'  =  0', 


=  Viz  + 


v'oz  =  Viz  + 


-  Sign(n(')g  -  s" 

0'  - 1" 

t"(Voz  -  Viz)  -  (t"  -  &')(Voz  -  Viz) 


0' 


t"{Voz  -  V'oz) 

0' 


+  Voz- 


Recovery-circle.  If  0  <  0"  <  t”  and  |sz|  >  H  then  there  is  a  recovery-circle  solution  (Figure  4.7). 
It  is  given  by  t'  =  0", 


v'oz.  =  Viz  + 


Voz  =  Viz  + 


-sign(vz)H  -  Sz 

0" 

f'iVoz  -  Viz)  -  ®"{v'oz  -  Viz) 


t"  -  0" 


t"voz  -  e"vL 
t"  -  0" 


One-circle.  If  0  <  0'  and  0"  <  t”  then  for  both  e  €  {  —  1, 1}  there  may  be  a  one-circle  solution. 
Figure  4.4  shows  the  case  where  a  one-circle  solution  exists  for  each  e  =  1  (left)  and  e  =  —  1  (right). 
If  ssz  <  H  and  ss”  <  H,  then  we  compute  the  vertical  speeds 


v'oz  =  Viz  + 


eH  -  Sz 

0'  ’ 

„  ,  sH-s'l 

Voz  =  Viz  +  ■ 


If  v'oz  7^  v'oz,  then  t'  is  given  by  (4.16) 

t'  =t"{Voz-v':z) /{v'oz- v'^z)- 

In  this  case,  there  is  a  one-circle  solution  for  e  given  by  v'oz,  t' . 

We  remark  that  there  are  no  vertical  solutions  that  touch  the  lines,  neither  circle-circle  solutions. 
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4.3.  Change  of  ground  speed  only.  We  impose  the  constraint  that  only  the  ground  speed  of  the 
ownship  changes  in  each  step.  Formally,  there  are  factors  k,j  >  0,  such  that 

v'ox  =  kvox,  Vgy  =  kvoy,  =  Vgz,  (4.20) 

v'L=jVox,  v”y=jVoy,  v'^^=Voz-  (4.21) 

Since  absolute  ground  speeds  are  different  from  zero,  either  Vqx  0  or  Vgy  0.  In  the  first  case  we  get 

t'{k-j)=t"{l-j)  (4.22) 


from  (4.14).  In  the  second  case,  i.e.,  Vgy  0,  we  get  the  same  formula  (4.22)  from  (4.15). 

If  A:  =  j  then  from  (4.22),  0  =  t"(l  —  j).  Since  t”  >  0,  we  have  j  =  1  and  so  A:  =  1.  So  there  is  no 
predicted  conflict  at  time  0.  Since  this  contradicts  the  premise,  we  must  have  k  ^  j.  Therefore,  the  time  t' 
of  switch  can  be  obtained  from  (4.22)  as 


k-j 


(4.23) 


We  have  the  following  independent  solutions.  For  the  cases  involving  an  escape  line  course,  we  check  for 
sanity  that  0  <  r'  <  t' ,  where  r'  is  defined  as  in  (4.9).  For  the  cases  involving  a  recovery  line  course,  we 
check  for  sanity  that  t'  <  r"  <  t”  ,  where  r"  is  defined  as  in  (4.11).  Furthermore,  for  the  cases  involving  a 
circle  course,  we  assume  that  relative  vertical  speed  is  not  zero,  i.e.,  Vz  0;  otherwise,  there  is  no  solution. 
In  all  the  cases,  we  check  for  sanity  that  k,j  >  0. 

•  Line/line.  During  the  escape  course  and  during  the  recovery  course,  the  lateral  surface  of  P  is 
touched  (Figure  4.1). 

In  the  tangent  condition  for  the  escape  course  (4.8),  we  instantiate  using  v'  =  Vg  —  Vi  and  (4.20): 

D  (^(^kVgx  ^ia;)  T  {kVgy  ^ij/)  )  —  {^x{kVoy  ^ij/)  ^y{kVox  '^ix')')  •  (4.24) 


This  reduces  to  a  quadratic  equation  in  k: 

^  i'^ox  4"  ^OJ/)  ~  {Sx'Voy  ~  SyVox)  ]  + 

2A:[  D  {VqxVix  P  VgyViy^  +  {^x'^oy  ^y'^ox^i^x'^iy  ^y'^ix^]  T 

+Viy)  -  {SxViy  -  SyVixY  =  0. 

This  quadratic  equation  in  k  can  be  solved  to  obtain  and  v'^y.  If  all  coefficients  in  the  quadratic 
equation  for  k  are  zero  then  the  aircraft  are  not  in  predicted  conflict  at  time  0. 

The  tangent  condition  for  the  recovery  course  (4.10),  instantiated  using  v"  =  u"  —  u)  and  (4.21), 

D  {{jVgx  ~  Vix)  +  {j'^oy  ~  Viy)  )  i^xij^oy  ~  Viy)  —  Sy^jVgx  ~  Vix))  ,  (4-25) 

can  be  reduced  likewise  to  a  quadratic  equation  in  j .  We  solve  it  to  obtain  and  v'Jy . 

The  time  t'  of  switch  is  obtained  from  (4.23). 

•  Line/circle.  During  the  escape  course,  the  lateral  surface  of  P  is  touched.  During  the  recovery 
course,  one  of  the  two  circles  is  intersected  (Figure  4.2). 

For  the  line  case,  we  have  to  solve  the  tangent  condition  for  the  escape  course  (4.24),  which  we  can 
solve  for  k  as  in  the  line/line  case. 
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For  the  circle  case,  we  get  9"  by  (4.13).  We  check  for  sanity  that  0  <  9"  <  t” .  At  time  9"  the  circle 
is  intersected: 

(4'  +  {9"  -  +  (4'  +  {9"  -  -  Viy)f  =  D\  (4.26) 

This  equation  yields  a  quadratic  equation  in  j  that  can  be  solved: 
j\9"  + 

2j{9"  -  t")(s'^Vox  -  (9"  -  t")VixVox  +  SyVoy  -  (9"  -  t")ViyVoy)  + 

(4'  -  {9"  -  t")vixf  +  (4'  -  {9"  -  t")viyf  -D^=Q.  (4.27) 

Using  (3.1),  we  check  for  sanity  that  9"  is  an  entry  point  to  the  infinite  cylinder: 

(s"  +  (6»"  -  t''){jVox  -  Vix))Uvox  -  Vix)  +  {Sy  +  {9"  -  t"){jVoy  -  Viy)){jVoy  -  Viy)  <  0.  (4.28) 

The  time  t'  of  switch  is  obtained  from  (4.23).  We  check  for  sanity  that  t'  <  9" . 

•  Circle/line.  The  escape  course  intersects  one  of  the  circles,  and  the  recovery  course  touches  the 
lateral  surface,  of  P.  This  case  is  depicted  in  Figure  4.3. 

For  the  circle,  we  get  9'  by  (4.12).  We  check  for  sanity  that  Q  <  9'  <  t" . 

The  circle  is  intersected  at  time  9': 

{Sx  +  9'{kvox  -  Vix)f  +  {sy  +  9'{kvoy  -  Viy)^  =  (4.29) 

This  equation  yields  a  quadratic  equation  in  k  that  can  be  solved: 

k^9'Hvlx+vly)  + 

2k9  {SxVqx  9  Vix'^ox  T  ^y'^oy  9  V^yVQy^  T 

{sx  -  9'vixf  +  {sy  -  9'viyf  -  7^2  =  0.  (4.30) 

Using  (3.2),  we  check  for  sanity  that  9'  is  an  exit  point  from  the  infinite  cylinder: 

(Sx  T  9  (^kVox  '^ixy){kVox  '^ix')  T  {^y  T  9  (^kVoy  '^iy^^{kVoy  ^ij/)  ^  0-  (^•^^) 

For  the  line,  we  have  to  satisfy  the  tangent  condition  for  the  recovery  course  (4.25),  which  can  be 
solved  for  j  as  in  the  line/line  case. 

The  time  t'  of  switch  is  obtained  from  (4.23).  For  sanity,  we  check  that  9'  <  t' . 

•  Circle/circle.  We  may  have  a  circle-circle  solution  (Figure  4.5)  when  times  9' ,9” ,  given  by  (4.12) 
and  (4.13),  satisfy  0  <  9'  and  9”  <  t”  —  or,  equivalently,  when  either  (s^  <  —H  and  H  <  s”) 
or  {s'l  <  —H  and  H  <  s^).  We  solve  the  two  quadratic  equations  (4.27)  and  (4.30)  for  j  and  k 
respectively.  We  check  for  sanity  that  time  9'  defines  an  exit  point  from  the  infinite  cylinder  (4.31) 
and  that  at  time  9”  there  is  an  entry  point  (4.28). 

The  time  t'  of  switch  is  obtained  from  (4.23).  We  check  for  sanity  that  9'  <  t'  <  9" . 

•  Escape-circle.  We  have  an  escape-circle  solution  if  there  is  only  one  intersection  with  a  circle  at 
time  9"  given  by  (4.13).  This  case  is  shown  in  side  view  in  Figure  4.6.  We  check  for  sanity  that 
0  <  9"  <  t” .  At  time  9”  the  circle  is  intersected  (4.26).  We  solve  the  quadratic  equation  (4.27)  for 
j  and  check  for  sanity  that  at  time  9"  there  is  an  entry  point  to  the  infinite  cylinder  (4.28). 

The  time  of  switch  is  given  by  t'  =  9" .  The  speed  factor  k  of  the  escape  step  is  obtained  from  (4.22) 
as 

,  j{9"-t")  +  t" 

‘  = - ¥' - ■ 
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•  Recovery-circle.  We  have  a  recovery-circle  case  if  there  is  only  one  intersection  with  a  circle  at 
time  9'  given  by  (4.12).  This  case  is  shown  in  side  view  in  Figure  4.7.  We  check  for  sanity  that 
0  <  9'  <  t" .  At  time  9'  the  circle  is  intersected  (4.29).  We  solve  the  quadratic  equation  (4.30)  for  k 
and  check  for  sanity  that  at  time  9'  there  is  an  exit  point  from  the  infinite  cylinder  (4.31). 

The  time  of  switch  is  given  by  t'  =  9' .  The  speed  factor  j  of  the  recovery  step  is  obtained  from  (4.22) 
as 

,  _  k9'  -  t" 

^  ~  9'  -  t"  ■ 

In  this  case  there  are  no  one-circle  solutions. 


4.4.  Change  of  heading.  We  impose  the  constraint  that  for  the  escape  step  only  the  heading  of 
the  velocity  vector  may  change.  For  the  recovery  step  the  heading  and  the  horizontal  speed  may  change. 
Formally, 


l2  ,  l2  2,2 

^ox  '  ^oy  ^ox  '  ^oy 


and 


v'oz  =  Voz  =  v'' 


(4.32) 


For  the  cases  involving  an  escape  line  course,  we  assume  that  s  is  not  in  the  infinite  cylinder  neither  at 
its  boundary,  i.e.,  -I-  We  also  check  for  sanity  that  0  <  r'  <  t',  where  r'  is  defined  as  in  (4.9). 

Symmetrically,  for  the  cases  involving  a  recovery  line  course,  we  assume  that  s"  is  not  in  the  infinite  cylinder 
neither  at  its  boundary,  i.e.,  s'^  +  and  we  check  for  sanity  that  t'  <  r"  <  t"  ,  where  r"  is  defined 

as  in  (4.11).  Furthermore,  for  the  cases  involving  a  circle  course,  we  assume  that  relative  vertical  speed  is 
not  zero,  i.e.,  Vz  0;  otherwise,  there  is  no  solution.  We  have  the  following  independent  solutions. 

•  Line/line.  The  situation  is  shown  in  Figure  4.1.  For  the  escape  step  we  consider  cases: 

—  Case  =  0.  Then  the  tangent  condition  (4.8)  specializes  to  D'^v'y  =  .  So  there  are 

escape  courses 


+  vly  -  by  (4.32),  for  each  e  e  {-1, 1},  when  >  Vix 


oy  -  Y  ''ox  •  '■oy 

(sanity  check)  and  =  s*,  and 
*  v'ox  =  Vix,  v'„y  =  Viy,  when  vl^  +  vly  =  +  vjy. 

—  Case  v'x  ^  0.  We  may  define  a'  =  Vy/v'x-  In  this  case  the  tangent  condition  (4.8)  reduces  to 


D^l  +  a'^)  =  {sxa'  -sy)\ 


and  further  to  a  quadratic  equation  in  a': 


' —  Sx)  +  2q:  SxSy  -t-  ~  s't  —  0. 


(4.33) 


If  =  Sx  then  Sy  0,  because  s  is  not  at  the  boundary  of  the  infinite  cylinder.  In  this  case. 


,  -  4 

a  =  -- 


2SxSy 


Otherwise,  Equation  (4.33)  has  solutions 


^x^y  T  ^ 


•d/. 


+  si  -  T>2 


D-^-sl 

where  s'  €  {  —  1, 1}. 

Equation  (4.32)  and  v'  =  v'g  —  vl  yields  a  quadratic  equation  in 


<2(1  -I-  a'2)  -I-  2v'x{vix  +  a'viy)  +  -b  vfy  -  =  0. 


We  get  v'x  by  solving  (4.34)  and  v'  by  v'  = 


(4.34) 
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For  the  recovery  step  we  consider  cases: 

—  Case  v”  =  0.  We  check  for  sanity  that  v'^  ^  0.  In  order  to  satisfy  the  tangent  condition  (4.10) 
we  must  satisfy  This  gives  two  cases: 


*  Vox  =  Vix  ,  V”y  =  Vi, 
-'ox  ‘ 


'My 

*  Vox  =  Vix,  v”y  G  {y|</  +y‘^  0},  when  =  sf. 

From  the  time  t'  of  switch  we  get  the  equation  system 

t'v'^=t''vx, 

From  (4.35)  we  get  t'  as  t'  =  t"vxlv'^.  We  finally  get  u"  by  (4.18). 

—  Case  v”  ^  0.  We  define  a"  =  Vy/v”.  The  tangent  condition  (4.10)  then  reduces  to 

DHl+a"^)  =  (s'X  -Sy)^. 

If  ^  Equation  (4.37)  yields  a  quadratic  equation  in  a”  with  solutions: 


(4.35) 

(4.36) 


(4.37) 


-4s”+s"D 


a  = 


Jl2 


+ 


D‘^  -  s': 


where  s"  G  {  —  1, 1}.  If  then  s'y  /  0,  because  s"  is  not  at  the  boundary  of  the  infinite 

cylinder.  In  this  case, 


a  = 


2s'isv 


The  time  t'  of  switch  is  given  by  the  equation  system  (4.14)  and  (4.15).  Replacing  v”  with 
v”a'',  and  subtracting  from  (4.15)  the  Q:"-multiple  of  (4.14),  we  get 


t'{v'y-a"vl)=t"{vy-a"vx)- 

We  check  for  sanity  that  v'y  ^  a"v'^.  From  (4.38),  t'  is  obtained  as 

^  t''{vy  -  a"vx) 
v'y  -  a"v'^ 


(4.38) 


(4.39) 


We  get  u"  by  (4.17)  and  v'y  by  v'y  =  v'^a" .  The  absolute  ownship’s  velocity  is  obtained  from 
the  relative  one. 

Line/circle.  The  situation  is  depicted  in  Figure  4.2.  The  line  case  of  the  escape  step  is  solved 
exactly  as  in  the  case  line/line.  Thus,  we  get  and  v'y.  For  the  circle  case  of  the  recovery  step, 
we  determine  the  time  of  contact  with  the  circle  9",  given  by  (4.13).  For  sanity,  we  check  that 
r'  <  6"  <  t" ,  where  r'  is  defined  as  in  (4.9). 

The  horizontal  distance  to  the  origin  at  time  9"  is  D: 


{Sx  +  tv;  +  {9"  -  t'Kr  +  {Sy  +  t'v'y  +  {9"  -  t')v';f  =  D\ 
This  equation  reduces  via  (4.17),  (4.18),  and  (2.1)  to  the  quadratic  equation  in  t' 


(4.40) 


t'1(4'  +  {0"  -  t")v',Y  +  {s'l  +  {9"  -  nv'yY  -  D^]  + 

2t'[-(4'  +  {9"  -  t")vYt"{sx  +  9"vx)  -  «'  +  {9"  -  t")v'y)t"{sy  +  9"vy)  + 1" + 


f'Yisx  +  9"vxY  +  [sy  +  9"vyY  -  DY  =  0. 
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By  construction  of  the  line  case  and  r'  /  O''  we  get  +  (0"  —  +  {s'y  +  {0"  —  t")v'yy'  >  D‘^ . 

We  solve  the  quadratic  equation  to  yield  t' .  Speeds  and  v'^y  are  obtained  as  follows: 


V 

V 


II 

ox 


II 

oy 


t"Vx  -  t'v'^ 
t"  -  t' 

t"Vy  —  t'v'y 

t"  - 1' 


"t"  '^ix  j 

+  Viy  . 


Using  (3.1),  we  check  for  sanity  that  9”  is  an  entry  point  to  the  infinite  cylinder: 


(4'  +  {0"  -  -  V,,)  +  «'  +  {9"  -  -  V,yW'  -  V,y)  <  0. 


(4.41) 


•  Circle/line.  A  circle/line  maneuver  is  shown  in  Figure  4.3.  For  the  circle  case  of  the  escape  step, 
we  get  the  time  9'  of  contact  with  the  circle,  given  by  by  (4.12).  We  check  for  sanity  that  0  <  <  t" . 

The  escape  course  satisfies 


(s.  +  0'(u4  -  Vi,)f  +  {Sy  +  9\v',y  -  Viy)f  =  D\  (4.42) 

which  reduces  to 


-  2{sy  -  9'viy)9'v'  = 


{sx  -  9'vi,f  +  {sy  -  9'viyf  +  2(s,  -  9'vi,)9'v',,  +  +  9'^v',l  -  (4.43) 


Squaring  both  sides  and  using 


l2  2,2  l2 

^oy  ^ox  '  ^oy  ^ ox 


yields  a  quadratic  equation  in 


'^'ox^  +  Kx^  +  C  —  0, 


(4.44) 

(4.45) 


where 


A  =  46»'4(s*  -  9'vixy  +  {sy  -  9'viyf), 

B  =  4:{s^-9'vi^)9'E, 

C  =  E^-4{sy-9'viy)9'^vl+vly), 

E  =  (s,-  9'vi,f  +  (sy  -  9'viyf  +  9'\l,  +  9'\ly  -  D\ 

If  A  =  0,  then  Sx  =  9'vix  and  Sy  =  9'viy,  and  so  B  =  0  and  C  =  E"^ .  If  E  =  0,  i.e.,  9'‘^vl^  = 

D^,  then 


(Sx  +  9  (Vqx  Vix))  T  {Sy  +  9  {Voy  —  D  , 


so  there  is  no  predicted  conflict.  If  i?  0  then  there  is  no  solution. 

If  A  0,  we  get  two  solutions  for  which  yields  solutions  for  v'^y,  via  (4.44).  We  check  for  sanity 
that  vlx+vly  >  v'„l. 

Using  (3.2),  we  check  for  sanity  that  9'  is  an  exit  point  from  the  infinite  cylinder: 

(sx  +  9'(v'„x  -  Vix))(v'„x  -  Vix)  +  (sy  +  9'(v'„y  -  Viy))(v'„y  -  Viy)  >  0.  (4.46) 

For  the  line  case  of  the  recovery  step,  we  have  to  satisfy  the  tangent  condition 

D^vf  +  v';^)  =  {sy;-s'xr. 

We  consider  the  following  cases: 


16 


Case  v”  ^  0.  We  substitute  a”  =  Vy/v”  and  get 


/  n  II  ii\2 


This  equation  reduces  the  quadratic  equation  in  a” 


a"HD‘^  -  sf)  +  a"2sy;  +  -  sf  =  0. 


If  then  s"  ^  0,  because  s"  is  not  at  the  boundary  of  the  infinite  cylinder.  In  this  case 


=  (i52-0/(24V'). 


Otherwise,  we  solve  the  quadratic  equation  for  a" . 

The  time  of  switch  t'  yields  (4.39)  and  so  t' ,v'J.,Vy  as  in  the  line/line  case.  We  check  for  sanity 
that  6'  <  t'. 

—  Case  v'^  ^  0  and  v”  =  0.  From  (4.14)  we  get  t'  =  t''vx/v'^,  and  finally  we  get  v”  by  (4.18). 

•  Circle/circle.  Circle-circle  solutions  (Figure  4.5)  may  exist  if  the  times  O', 9”,  given  by  (4.12) 
and  (4.13),  satisfy  0  <  O'  and  0"  <  t"  —  or,  equivalently,  if  either  (s^  <  —H  and  H  <  s")  or 
(s"  <  —H  and  H  <  Sz). 

From  (4.42)  and  (4.32)  we  get  and  v'^y  as  in  the  circle/line  case. 

At  time  0"  the  circle  is  intersected: 


(4'  +  {0"  - 1")4)^  +  «'  +  {0"  -  =  D\ 

By  (4.17)  and  (4.18)  this  reduces  to  the  quadratic  equation  in  t': 


t'^[{4  +  {9"  -  t"Kr  +  (4  +  (^"  -  Ov'y)^]  + 

t'[-2t"(s':  +  (0"  - 1")4)(4'  +  (0"  -  f")w)  -  2t''(4'  +  (0"  -  t")v'y)(s'^  +  (0" 

+  iO"  -  f")w)"  +  t"4Sy  +  {0"  -  t")Vyf  -  D^t"  -  t'f  =  0. 


t>v)]  + 


If  =  —s'^KO"  —  t")  and  v'y  =  —s'y/{0"  —  t")  then  this  equation  has  no  solution.  Otherwise,  we 
solve  this  equation  for  t'  and  we  get  n"  and  v'y  from  (4.17)  and  (4.18),  respectively. 

We  check  for  sanity  that  O'  <  t'  <  0" ,  that  time  O'  defines  an  exit  point  from  the  infinite  cylin¬ 
der  (4.46),  and  that  at  time  0"  there  is  an  entry  point  (4.41). 

•  Escape-circle.  Escape-circle  solutions  (Figure  4.6)  may  exist  if  there  is  only  one  intersection  with 
a  circle  at  time  0"  defined  by  (4.13).  We  check  for  sanity  that  0  <  0"  <  t" . 

At  time  0"  the  circle  is  intersected: 


(s.  +  +  {Sy  +  0"(v'  - 


Speeds  and  v'^y  are  derived  as  in  the  circle/line  case,  but  for  0"  instead  of  O' .  The  time  of  switch 
t'  is  given  by  t'  =  0" .  The  velocity  vector  of  the  recovery  case  is  given  by  (4.14)  and  (4.15)  as  follows: 


„  ^  t'v'^^  -  t"Vo 

ox  qh  _ 

n  _  t'Ky  - 

0"  - 1" 


(4.47) 

(4.48) 


We  check  for  sanity  that  at  time  0"  there  is  an  entry  point  to  the  infinite  cylinder  (4.41). 
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•  Recovery-circle.  Recovery-circle  solutions  (Figure  4.7)  may  exist  if  there  is  only  one  intersection 
with  a  circle  at  time  9'  defined  by  (4.12).  We  check  for  sanity  of  9'  that  0  <  9'  <t" . 

At  time  t'  =  9'  the  circle  is  intersected: 

{Sx  +  9'{v'„x  -  Vix)f  +  {Sy  +  9'{v'„y  -  Viy)f  = 

We  derive  solutions  for  and  v'^y  exactly  as  in  the  circle/line  case.  We  check  for  sanity  that  at  time 
9'  there  is  an  exit  point  from  the  infinite  cylinder  (4.46).  The  values  for  v'Jx  and  v^y  are  obtained 
from  (4.47)  and  (4.48),  respectively. 

In  this  case  there  are  no  one-circle  solutions. 

5.  Conclusion  and  Future  Work.  We  presented  a  resolution  and  recovery  algorithm  for  two  aircraft, 
namely  ownship  and  intruder.  The  algorithm  outputs  a  choice  of  maneuvers  for  the  ownship,  which  is 
predicted  to  be  in  conflict  with  an  intruder  aircraft  when  flying  towards  a  target  point.  Each  maneuver 
consists  of  an  escape  velocity  vector,  a  recovery  velocity  vector,  and  a  time  of  trajectory  change  t' .  Together 
they  determine  an  escape  course,  a  recovery  course,  and  a  new  trajectory  change  point.  If  the  ownship  flies 
the  escape  course  from  time  0  to  time  t'  and  then  switches  to  the  recovery  course  at  time  t' ,  it  arrives  at  the 
original  target  point  at  the  scheduled  time,  while  maintaining  minimum  separation  at  all  times. 

We  gave  a  rigorous  mathematical  description  of  the  problem  and  proved  that  the  recovery  and  resolution 
algorithm  (RR3D)  is  correct  given  some  initial  assumptions,  e.g.,  there  is  a  predicted  conflict  and  the  aircraft 
are  not  in  violation  of  the  minimum  separation,  the  algorithm  outputs  a  choice  of  conflict-free  maneuvers 
that  lead  the  ownship  to  the  target  point  at  the  scheduled  time.  We  intend  to  check  the  correctness  proof 
using  the  PVS  theorem  prover  [13]. 

The  maneuvers  returned  by  the  algorithm  are  optimal  in  a  geometric  way,  i.e.,  escape  and  recovery 
courses  are  tangential  to  the  intruder’s  protected  zone.  They  differ  in  the  constraints  they  satisfy.  For 
instance,  one  constraint  requires  that  only  a  change  of  heading  is  allowed  for  the  escape  course.  These 
constraints,  which  are  not  limitations  imposed  by  the  aircraft,  are  there  to  reduce  the  number  of  solutions  to 
the  problem.  Our  set  of  constraints  is  by  no  means  exhaustive  or  unique.  Other  constraints  may,  however, 
easily  be  added.  Specifically,  we  are  currently  working  on  the  following  additional  constraints: 

•  A  change  of  heading  and  ground  speed  for  the  escape  step  such  that  the  ground  speed  does  not 
change  during  the  recovery  step,  i.e.,  v'flf  v'fy  =  v'^x  +  v'ffy  and  =  Vqz  =  This  case  yields 
surprisingly  difficult  systems  of  equations,  including  polynomials  of  degree  3,  4,  and  6. 

•  Optimal  solutions  satisfying  no  constraints.  These  solutions  may  be  difficult  to  implement  by  a 
human  pilot  since  they  require  a  simultaneous  change  of  several  parameters  of  the  aircraft  (heading, 
vertical  speed,  and  ground  speed).  However,  in  the  future,  they  could  be  suitable  for  a  flight  guidance 
system. 

A  prototype  of  RR3  has  been  implemented  in  Java.  Currently,  we  are  conducting  experiments  and 
simulations  to  study  the  applicability  of  RR3D  as  the  inner  loop  of  a  strategic  conflict  detection  and  resolution 
approach. 

Acknowledgments.  The  idea  to  extend  KB3D  [4]  with  recovery  courses  is  due  to  David  Wing.  We 
acknowledge  stimulating  discussions  with  the  DAG-TM  team,  Hanne  Gottliebsen,  and  Victor  Carreno. 
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